This vulnerability allows an attacker to execute arbitrary commands on the system that runs the n8n process. The Git node incorrectly resets a limited set of command‑bearing configuration keys before each Git operation, but it fails to reset the content‑filter and merge‑driver key families. When a repository contains a local Git configuration that sets one of these keys with a matching attribute pattern, Git runs the configured command during normal operations such as Add, Commit, Checkout, or Pull. The attack exploits an OS command injection weakness (CWE‑78) and can compromise confidentiality, integrity, and availability of the host system.

The flaw exists in n8n versions released before 1.123.73, 2.35.4, and 2.36.2, under the n8n‑io:n8n vendor. Systems running any of these unpatched versions are vulnerable. The attack does not depend on a specific OS or architecture, but the command runs with the privileges of the n8n process user.

The CVSS score of 7.7 indicates a moderate‑high severity vulnerability. EPSS is not available, and the flaw is not listed in the CISA KEV catalog, suggesting no current known large‑scale exploitation. The likely attack vector is a malicious or compromised repository that contains problematic configuration keys. An attacker who can influence the contents of the repository or its local Git configuration can trigger code execution during ordinary Git operations, potentially leading to system compromise.